fuel-alert/resources/views/legal/cookies.blade.php

{{-- DRAFT: Generated {{ date('Y-m-d') }}. Review by UK-qualified solicitor recommended before launch. --}}
<x-layouts.legal
        title="Cookie Policy"
        heading="Cookie Policy"
        lastUpdated="{{ now()->format('j F Y') }}"
        metaDescription="The cookies and similar technologies FuelAlert uses, and how to manage them.">

    <section class="space-y-3">
        <h2 class="font-display text-2xl font-bold text-zinc-900">1. What cookies are</h2>
        <p>
            Cookies are small text files placed on your device by websites you visit. They allow a
            site to remember things between visits (for example, that you're signed in) and to
            measure how the site is used. This policy explains how FuelAlert uses cookies and
            similar technologies, and how you can manage them.
        </p>
    </section>

    <section class="space-y-3">
        <h2 class="font-display text-2xl font-bold text-zinc-900">2. Cookies we use</h2>
        <p>
            FuelAlert uses only <strong>essential</strong> cookies &mdash; cookies that are strictly
            necessary to deliver the service you've asked for. Under the Privacy and Electronic
            Communications Regulations (PECR), these do not require your consent, but we list them
            here for transparency.
        </p>
        <p>
            For aggregated usage metrics we run our own self-hosted instance of
            <strong>Umami Analytics</strong>, which is <strong>cookieless</strong> &mdash; it does
            not set any cookies, does not use device fingerprinting, and does not track you across
            sites. It does not store information that identifies you as an individual, so no consent
            is required.
        </p>

        <div class="overflow-x-auto">
            <table class="w-full border-collapse text-left text-sm">
                <thead class="bg-zinc-100">
                <tr>
                    <th class="border border-zinc-300 px-3 py-2 font-semibold">Name</th>
                    <th class="border border-zinc-300 px-3 py-2 font-semibold">Purpose</th>
                    <th class="border border-zinc-300 px-3 py-2 font-semibold">Duration</th>
                    <th class="border border-zinc-300 px-3 py-2 font-semibold">Type</th>
                </tr>
                </thead>
                <tbody>
                <tr>
                    <td class="border border-zinc-300 px-3 py-2 font-mono text-xs">fuel_alert_session</td>
                    <td class="border border-zinc-300 px-3 py-2">Keeps you signed in and maintains your session state.</td>
                    <td class="border border-zinc-300 px-3 py-2">Session</td>
                    <td class="border border-zinc-300 px-3 py-2">Essential</td>
                </tr>
                <tr>
                    <td class="border border-zinc-300 px-3 py-2 font-mono text-xs">XSRF-TOKEN</td>
                    <td class="border border-zinc-300 px-3 py-2">Protects against cross-site request forgery attacks on forms and account actions.</td>
                    <td class="border border-zinc-300 px-3 py-2">Session</td>
                    <td class="border border-zinc-300 px-3 py-2">Essential</td>
                </tr>
                <tr>
                    <td class="border border-zinc-300 px-3 py-2 font-mono text-xs">remember_web_*</td>
                    <td class="border border-zinc-300 px-3 py-2">"Remember me" &mdash; keeps you signed in across browser restarts if you tick the box at login.</td>
                    <td class="border border-zinc-300 px-3 py-2">30 days</td>
                    <td class="border border-zinc-300 px-3 py-2">Essential</td>
                </tr>
                </tbody>
            </table>
        </div>

        <p class="text-sm text-zinc-600">
            If we add a non-essential cookie in future (for example, a marketing or advertising
            tool), we will add it to the table above and request your consent before it loads.
        </p>
    </section>

    <section class="space-y-3">
        <h2 class="font-display text-2xl font-bold text-zinc-900">3. Your choices</h2>
        <p>
            Because we currently use only essential cookies, there is nothing to opt in or out of
            on FuelAlert at this time. If we introduce non-essential cookies in future (for example,
            analytics or marketing), we will ask for your consent first and give you a way to accept,
            reject, or customise your choice. We will not set non-essential cookies before you have
            given consent.
        </p>
        <p>
            All major browsers also let you view, block, or delete cookies. The ICO publishes
            guidance on managing cookies in your browser:
            <a class="text-accent underline" href="https://ico.org.uk/your-data-matters/online/cookies/" target="_blank" rel="noopener">ico.org.uk &middot; managing cookies</a>.
            Note that blocking essential cookies will prevent you from signing in.
        </p>
    </section>

    <section class="space-y-3">
        <h2 class="font-display text-2xl font-bold text-zinc-900">4. Changes to this policy</h2>
        <p>
            We may update this policy if we add new cookies, change our providers, or in response to
            legal or guidance changes. Material changes will be highlighted by an updated
            "Last updated" date at the top of this page.
        </p>
    </section>

    <section class="space-y-3">
        <h2 class="font-display text-2xl font-bold text-zinc-900">5. Contact</h2>
        <p>
            Questions about cookies? Email
            <a href="mailto:hello@fuel-alert.co.uk" class="text-accent underline">hello@fuel-alert.co.uk</a>.
        </p>
    </section>
</x-layouts.legal>